fips: disable GNUTLS_CIPHER_3DES_CBC self-test

Signed-off-by: Alexander Sosedkin <asosedkin@redhat.com>

diff --git a/lib/fips.c b/lib/fips.c
index 7d143e608e2e7da8a6333d21b77d3156e9d0ae9f..54eb4a37d448ba568e97b02ba70bf508f44fea43 100644 (file)
--- a/lib/fips.c
+++ b/lib/fips.c
@@ -440,11 +440,6 @@ int _gnutls_fips_perform_self_checks2(void)
        /* Tests the FIPS algorithms */
 
        /* ciphers - one test per cipher */
-       ret = gnutls_cipher_self_test(0, GNUTLS_CIPHER_3DES_CBC);
-       if (ret < 0) {
-               return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);
-       }
-
        ret = gnutls_cipher_self_test(0, GNUTLS_CIPHER_AES_256_CBC);
        if (ret < 0) {
                return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);